REMARKS 



Claims 1, 3, 16, and 17 have been amended to clarify the subject matter regarded as the 
invention. Claims 1-12, 16, and 17 are pending. 

The Examiner has rejected claim 3 under 35 U.S.C. 1 12. It is believed that amended 
claim 3 overcomes the rejection. 

The Examiner has rejected claims 1-12, 16, and 17 under 35 U.S.C. 103(a) as being 
unpatentable over Porras et al in view of Beardsley et al. 

The rejection is respectfully traversed. With respect to claim 1, Porras teaches 
consolidating alerts that are indicative of a common incident. Beardsley teaches using time 
stamps to correlate event times between different systems. 

Neither Porras nor Beardsley describes an analysis engine configured to "identify a 
backward time step" in a logfile, "determine that the backward time step is associated with an 
event," and "assign a suspicion value to the event based at least in part on the backward time 
step," as recited in claim 1. Support for the amendments to claim 1 is found, without limitation, 
in the application at page 85, lines 17-19 and at page 86, line 20 to page 87, line 2. As such, 
claim 1 is believed to be allowable. 

Claims 1-12 depend from claim 1 and are believed to be allowable for the same reasons 
described above. 

Claim 16 recites a method executed by the system of claim 1. Therefore, it is believed 
that claim 16 is also allowable. 

Claim 17 recites program code for carrying out the method of claim 16. Therefore, it is 
beheved that claim 17 is also allowable. 

Reconsideration of the application and allowance of all claims are respectfully requested 
based on the preceding remarks. If at any time the Examiner believes that an interview would be 
helpful, please contact the undersigned. 
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Respectfully submitted, 



Dated: W/llzOO^ CMlAg^ -j^U^yM^ 

Clover Huang u 
Registration No. 55,285 
V 408-973-2594 
F 408-973-2595 



VAN PELT, YI & JAMES LLP 
10050 N. Foothill Blvd., Suite 200 
Cupertino, CA 95014 
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